CVE-2025-7378

Vulnerability Description

An improper Input Validation vulnerability allows injecting arbitrary values of the NAS configuration file in ASUSTOR ADM. This could potentially lead to system misconfiguration and break the format of the configuation file, causing the NAS to exhibit unexpected behavior. This issue affects ADM: from 4.1 before 4.3.1.R5A1.

Related Weaknesses (CWE)

CWE-20

References

https://www.asustor.com/security/security_advisory_detail?id=41

FAQ

What is CVE-2025-7378?

CVE-2025-7378 is a documented vulnerability. An improper Input Validation vulnerability allows injecting arbitrary values of the NAS configuration file in ASUSTOR ADM. This could potentially lead to system misconfiguration and break the format o...

How severe is CVE-2025-7378?

CVSS scoring is not yet available for CVE-2025-7378. Check NVD for updates.

Is there a patch for CVE-2025-7378?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.